$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: 1SN81dZqnD56qjcqOlSAvpAChz4tsuAUSbiDOOnnU4I= Subject key identifier: 0A:9B:E8:A3:75:BE:A3:F8:BA:44:90:2E:43:0C:46:61:A6:92:AC:FD Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019D2A3BF18BAE1993D0C1A573391A082261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 1829 Signing time: Thu 26 Mar 2026 13:01:04 +0000 Manifest this update: Thu 26 Mar 2026 13:01:04 +0000 Manifest next update: Fri 27 Mar 2026 13:01:04 +0000 Files and hashes: 1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=) 2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=) 3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=) 4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=) 5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=) 6: 8GnAqPanEF-aLifFEt28x_W5bDA.roa (hash: MVg0h+oZbG/5iMupvC5wE+JQeAtDrUL1XBd2HQzTeWA=) 7: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=) 8: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=) 9: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=) 10: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=) 11: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=) 12: WZU6FHFcHOx5fALoZimlHMooRJs.roa (hash: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E=) 13: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=) 14: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=) 15: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: 3G5+RL3e85mUfeCtdHokepSU+aGlFATlcvrOs49RM2o=) 16: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=) 17: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=) 18: xUsfdtgD1j1T7j6n66HdbJOfPDs.roa (hash: U4IhStPfUvQ+RWTW7WTK40Ox8axplO5trMxYdWn3hz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3b:f1:8b:ae:19:93:d0:c1:a5:73:39:1a:08:22:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Mar 26 13:01:04 2026 GMT Not After : Mar 27 13:01:04 2026 GMT Subject: CN=0a9be8a375bea3f8ba44902e430c4661a692acfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:ba:c9:97:3f:54:11:bb:3b:7a:00:27:12: 3f:98:ed:2c:b3:27:20:04:7b:8d:c8:f3:b5:30:6b: 6f:37:6f:f7:10:a5:09:eb:9e:ab:4d:da:32:5c:a8: 84:81:81:af:b1:5e:3f:d0:94:25:81:8d:28:6f:79: 93:ef:6d:13:0e:18:9f:3e:53:fa:00:58:1c:9b:b9: a0:6e:e9:0a:16:fe:6f:42:b8:03:89:71:8b:bf:a1: 2e:35:bf:ce:4b:f7:9e:41:20:d5:63:31:e1:b6:50: ff:d8:3f:c4:15:f0:c1:b0:70:69:bf:fe:5a:a6:b4: 88:99:8b:4e:d5:cc:c0:ec:a4:dc:7b:c6:d7:4c:17: ef:4d:de:29:f6:2d:86:48:c0:7e:5b:15:6e:79:c8: 87:73:85:3a:db:df:fd:45:66:12:16:d1:f4:19:d3: 84:4c:5c:79:5a:fc:b2:c8:23:c0:67:a6:15:e5:56: 56:ef:da:13:47:36:92:d4:7a:44:2a:36:bd:8c:7f: a4:24:da:f3:fd:f9:4f:83:eb:7d:c2:ce:71:9e:86: ca:25:0d:a6:39:c5:d3:ff:9b:10:46:cf:55:e3:6d: 9b:d7:eb:51:6e:ea:d9:87:37:2a:d0:1b:57:07:fb: c3:3a:79:e0:65:95:2d:40:29:1f:64:36:9c:86:4c: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9B:E8:A3:75:BE:A3:F8:BA:44:90:2E:43:0C:46:61:A6:92:AC:FD X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:d4:05:bb:80:89:52:3d:f7:b1:51:9b:09:c7:5d:16:29: 7e:89:26:90:e5:9b:1b:ba:4e:36:0e:29:55:fe:ac:d5:26:80: 53:5e:b2:db:36:06:4b:6b:c5:e1:07:dd:a5:25:de:93:65:72: 29:16:b6:0d:49:8c:7f:a7:b4:17:66:1f:61:7b:af:ed:c0:b4: 27:90:44:26:34:6e:44:6a:c0:9c:20:32:f3:fc:a5:10:25:5a: 89:d5:f1:4c:e6:49:67:09:41:10:4c:2b:1a:62:9d:ff:e8:dd: 83:6e:2d:88:a6:8a:29:2d:dd:df:7a:76:c5:7c:b0:39:3a:9f: b9:0a:5c:65:8f:4f:99:b9:9e:a1:29:47:d9:9b:a1:52:0d:69: 51:f9:40:0f:0c:36:c2:c1:e0:a2:97:6d:ad:50:80:87:3a:95: ac:9f:0f:a7:22:b8:0c:c0:3e:13:cb:a7:44:0a:8b:c1:d8:08: 12:3d:85:63:14:ba:17:56:1f:08:be:5e:92:a1:bd:60:1b:28: 1e:b9:65:73:a5:43:40:4c:f5:94:30:44:46:2b:10:7b:01:0b: 2a:c3:1d:28:a1:61:7a:30:2c:30:72:3b:fc:90:f1:09:98:70: e2:41:ca:f1:b4:a8:15:0d:c9:c4:0f:6b:aa:0b:96:d5:2f:a9: 69:60:7f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qO/GLrhmT0MGlczkaCCJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMzI2MTMwMTA0WhcNMjYwMzI3MTMwMTA0WjAzMTEwLwYDVQQD EygwYTliZThhMzc1YmVhM2Y4YmE0NDkwMmU0MzBjNDY2MWE2OTJhY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cy6yZc/VBG7O3oAJxI/mO0ssycg BHuNyPO1MGtvN2/3EKUJ656rTdoyXKiEgYGvsV4/0JQlgY0ob3mT720TDhifPlP6 AFgcm7mgbukKFv5vQrgDiXGLv6EuNb/OS/eeQSDVYzHhtlD/2D/EFfDBsHBpv/5a prSImYtO1czA7KTce8bXTBfvTd4p9i2GSMB+WxVueciHc4U629/9RWYSFtH0GdOE TFx5WvyyyCPAZ6YV5VZW79oTRzaS1HpEKja9jH+kJNrz/flPg+t9ws5xnobKJQ2m OcXT/5sQRs9V422b1+tRburZhzcq0BtXB/vDOnngZZUtQCkfZDachkwaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqb6KN1vqP4ukSQLkMMRmGmkqz9MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWHUBbuA iVI997FRmwnHXRYpfokmkOWbG7pONg4pVf6s1SaAU16y2zYGS2vF4QfdpSXek2Vy KRa2DUmMf6e0F2YfYXuv7cC0J5BEJjRuRGrAnCAy8/ylECVaidXxTOZJZwlBEEwr GmKd/+jdg24tiKaKKS3d33p2xXywOTqfuQpcZY9PmbmeoSlH2ZuhUg1pUflADww2 wsHgopdtrVCAhzqVrJ8PpyK4DMA+E8unRAqLwdgIEj2FYxS6F1YfCL5ekqG9YBso Hrllc6VDQEz1lDBERisQewELKsMdKKFhejAsMHI7/JDxCZhw4kHK8bSoFQ3JxA9r qguW1S+paWB/5g== -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:11 2026 by rpki-client